home

vestcert.exe

VestCert

yettiesoft co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘VestCert Client’.
Publisher:
Yettiesoft  (signed by yettiesoft co., Ltd.)

Product:
VestCert

Version:
2.0.3.1800

MD5:
6a572abc8a7f6729e05fdc1162ace43b

SHA-1:
38a72b7a7b780f25461989759b24274ffc996cef

SHA-256:
e8351ca6eb66f36d63ac35d1baa960cf3060fd67f233dba0ed6225bc29010a70

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/5/2025 12:50:15 PM UTC  (today)

File size:
2 MB (2,129,472 bytes)

Product version:
2.0.3.1800

Copyright:
Copyright (C) 2014

Original file name:
TokenManager.rc

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\vestcert\vestcert.exe

Digital Signature
Signed by:
yettiesoft co., Ltd.

Authority:
COMODO CA Limited

Valid from:
9/11/2015 9:00:00 AM

Valid to:
9/25/2017 8:59:59 AM

Subject:
CN="yettiesoft co., Ltd.", O="yettiesoft co., Ltd.", STREET="4, Hakdong-ro 4-gil", L=Gangnam-gu, S=Seoul, PostalCode=06110, C=KR

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00DFC7FBEF66AF49C99100BC6A92C6176C

File PE Metadata
Compilation timestamp:
12/18/2015 10:50:21 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x510000

Entry point:
56, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, F0, 1C, 00, 2D, 20, 3A, 60, 05, 05, 17, 3A, 60, 05, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, 17, 05, 44, 18, 68, 9A, 05, D1, 55, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, E8, CB, 7B, 6B, 67, 1A, 45, 12, 3A, 87, AC, 17, 5A, 6B, 72, 68...
 
[+]

Entropy:
7.4073

Code size:
351 KB (359,424 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
VestCert Client

Command:
C:\Program Files\vestcert\vestcert.exe


Scan vestcert.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.